Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
At a glance
- Severity
- Critical
- Used in attacks
- Yes, 1 of 1 flaw named
- Flaws named
- CVE-2026-0322
- Vendors and products
- Palo Alto
- Reported by
- 1 outlet
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS software enables an…
We summarise and link; this source is not one we hold a licence to reproduce. Everything below is what CyberBrief adds: the vulnerabilities involved, whether they are being exploited, who is named, and who else covered it.
Vulnerabilities referenced
- CVE-2026-0322Not scored yet
Palo Alto Networks PAN-OS
Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
Used in attacksAdded to CISA's list 2026-10-14
Full record →
Fastnexa security experts
This story involves a flaw attackers are already using. Are you exposed?
A Fastnexa penetration tester can check whether CVE-2026-0322 or anything like it can be used against your websites, apps and network.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-10-15 06:17 UTC
Related stories
- Networking problems after the October 2026 Windows update? NTLM might be to blame
The Register · 2026-10-16
- China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
Infosecurity Magazine · 2026-10-16
- Microsoft: October Windows update may break Smart App Control
BleepingComputer · 2026-10-16
- China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The Hacker News · 2026-10-16
- CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
The Hacker News · 2026-10-16